kshitijk4poor 569b4242a3 fix(auth): a Portal-returned inference host is accepted only when the operator named it ...

#111809 accepted any *.nousresearch.com https host once the operator's Portal override
pointed at a non-production Portal. That let a network-provenance value — the Portal's
refresh response — pick any Nous-owned host as the bearer recipient, including hosts that
are not inference gateways. Owning the DNS suffix is not the same as being an authorized
recipient, and the validator's threat model (an injected refresh response) is exactly the
case a suffix rule fails to bound.

The recipient is now the operator's own NOUS_INFERENCE_BASE_URL: a non-production host
returned by the Portal is accepted exactly when it equals that override's host, otherwise
the strict production set stands. The Portal override grants nothing by itself. What the
operator gains over plain use of the override is that the Portal's value is then persisted
and used for the pricing scope and proxy instead of being healed to production, and the
per-turn "refusing inference URL host" warning stops. No environment is named in code.

Raised on #111809 review. Tests: recipient match accepted, unrelated Nous host refused, no
override refused, Portal override alone grants nothing, the match follows the profile scope
under multiplexing; the widening cases are red on main. Docs row for NOUS_INFERENCE_BASE_URL.

Co-authored-by: Ben Barclay <ben@nousresearch.com>

2026-09-15 16:55:43 +05:30

..

dashboard_auth

fix(dashboard-auth): one refresh single-flight for the cookie gate and the native route, off the event loop

2026-09-13 09:40:44 -07:00

local_runtime

feat(local-runtime): prefer llama.cpp b10964

2026-09-14 21:49:13 -04:00

observability

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

proxy

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

subcommands

Inspired by ChatGPT Work: keep imported agent setups in sync (hermes import-agent --sync)

2026-09-15 03:58:44 -07:00

web_routers

fix(dashboard): profile-routed routers run under the profile's secret scope; console send never writes the process env

2026-09-15 03:46:29 -07:00

__init__.py

chore(release): v0.21.3 (v2026.9.14)

2026-09-14 09:02:28 -07:00

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

_parser.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

_scan_venv_blockers.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

_secrets_common.py

fix(integration): restore subprocess stdin=DEVNULL / utf-8 encoding guards and windows-footgun gates dropped by round-3 compaction

2026-09-03 02:46:19 -07:00

_startup_fast.py

fix(cli): preserve explicit dashboard update checks

2026-09-07 06:13:16 -07:00

_subprocess_compat.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

active_sessions.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

agent_import_sync.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_import.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_plugins.py

refactor(hermes_cli): simplify agent_import/agent_plugins (1369->1020 LOC): inline single-use helpers, unify permission/memory import paths, dispatch-driven report

2026-09-02 21:00:34 -07:00

AGENTS.md

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

anon_auth.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

anon_sign_in_cli.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

anon_sign_in.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

approval_mode.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval_transport.py

refactor(hermes_cli): group C — AST-neutral layout compaction (hug/pack/join, verified ast.dump-equal)

2026-09-02 20:56:23 -07:00

approvals_suggest.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approvals_test.py

fix(approval): approvals.deny applies inside isolated containers too (#91002)

2026-09-05 18:08:00 +05:30

archive_safe.py

refactor(hermes_cli): group D — is_relative_to/closing/suppress collapses, dedupe external paths via dict, drop redundant snap_dir/guards, compact bang_shell/archive_safe/__init__ layout

2026-09-02 22:51:30 -07:00

auth_codex.py

fix(codex): both transaction locks wait out the endpoint; adopt only a complete pair

2026-09-14 20:38:07 +05:30

auth_commands.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_constants.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

auth_model_picker.py

simplify(compat): models — drop 52 re-exports from hermes_cli.models, repoint 16 callers + 41 test files

2026-09-03 13:48:49 -07:00

auth_nous.py

fix(auth): a Portal-returned inference host is accepted only when the operator named it

2026-09-15 16:55:43 +05:30

auth_oauth_grants.py

refactor(auth): one stat per store file in the heal fingerprint

2026-09-09 21:17:35 +05:30

auth_openrouter.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_xai.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

auth_zai_kimi.py

refactor(hermes_cli): group C auth modules — compact WHY-preserving comments and docstrings

2026-09-02 21:59:38 -07:00

auth.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

azure_detect.py

refactor(hermes_cli): azure_detect — TokenProvider alias, collapsed except ladders, tighter docs

2026-09-02 20:34:28 -07:00

backup.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

bang_shell.py

fix(integration): bang_shell builds its env via build_subprocess_env()

2026-09-03 02:07:33 -07:00

banner.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

blueprint_cmd.py

refactor(hermes_cli): group C — pack short dict/kwarg spans (AST-verified)

2026-09-02 21:26:16 -07:00

browser_connect.py

fix(browser): bound auth backups without replacing live SQLite files

2026-09-08 05:10:57 -07:00

build_info.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

bundles.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

claw.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_agent_setup_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_billing_mixin.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_chat_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_chat_turn_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_commands_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_info_mixin.py

fix(context): derive the /context file listing from the builder's own discovery walk

2026-09-15 03:37:49 -07:00

cli_loops_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_modal_mixin.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

cli_model_switch_mixin.py

Port from langchain-ai/deepagents#5829: confirm mid-session model switches that abandon a large cached context

2026-09-13 20:54:50 -07:00

cli_output.py

refactor(hermes_cli): split TUI mixin god methods into phase helpers, unify panel/fragment boilerplate, compact docs

2026-09-02 21:23:44 -07:00

cli_process_notifications.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_session_mixin.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

cli_status_bar_mixin.py

refactor(cli): vim mode is a config key only — drop the /vim slash command

2026-09-12 22:00:02 -07:00

cli_stream_mixin.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_subagent_monitor.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

feat(model-pickers): reasoning effort selection on every model picker

2026-09-13 16:43:50 -07:00

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

clipboard.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

codex_models.py

Port pattern from zed-industries/zed#62729: request ungated Codex model catalog (clean-room)

2026-09-13 20:50:10 -07:00

codex_runtime_plugin_migration.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

codex_runtime_switch.py

refactor(hermes_cli): group B — docstring compaction, provider scalar-field table, config mirror _items helper, regex kebab collapse

2026-09-02 21:03:13 -07:00

colors.py

…

commands_completion.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

commands_platforms.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:25:36 -07:00

commands.py

Inspired by Factory Droid: /queue prompts are now listable, editable, and reorderable before they run

2026-09-13 20:41:41 -07:00

completion.py

refactor(hermes_cli): commands_completion — _completion() factory (7 sites), @_quiet on tools completer, score table; completion — inline single-use locals

2026-09-03 00:06:54 -07:00

config_backups.py

fix(config): a fresh process recovers the last good config.yaml instead of running on defaults

2026-09-12 16:17:04 -07:00

config_defaults.py

fix(telegram): allow opt-in CJK rich messages

2026-09-15 04:24:53 -07:00

config_effective.py

fix(config): good-config backup only for the active home; fixture-based effective-config contract

2026-09-13 05:09:06 -07:00

config_home.py

fix(config): diagnose unavailable home links without claiming YAML corruption

2026-09-07 04:46:37 -07:00

config_migrations.py

manage_connections covers local MCP servers; setup_mcp leaves the schema (NS-867, PR1) (#109517)

2026-09-15 00:41:13 +05:30

config_providers.py

fix(metadata): GLM context windows from the live catalog; hyphenated slugs, entry-level overrides, aux inherits main pin

2026-09-10 01:08:18 -07:00

config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

console_engine.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

container_boot.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

context_switch_guard.py

refactor(hermes_cli): group B — _rewrite_key generalization (v31/v35 fold), _put in provider normalizer, dedup loop flatten, gateway configured-dict; AST-neutral layout hug/pack

2026-09-02 20:47:14 -07:00

copilot_auth.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

credential_lifecycle.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

cron.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

curator.py

feat: curator prunes unused skills at 30 days (was 90), stale at 14

2026-09-12 05:56:15 -07:00

curses_ui.py

fix(cli): keep radio choices visible below long descriptions

2026-09-05 16:45:59 +05:30

dashboard_procs.py

fix(process-identity): desktop reap, Windows updater and profile liveness use the canonical matchers

2026-09-13 05:21:02 -07:00

dashboard_register.py

refactor(hermes_cli): group D layout — join lone closing-bracket lines (AST-neutral)

2026-09-03 00:04:40 -07:00

debug.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

default_soul.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

dep_ensure.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

desktop_update_verify.py

fix(desktop): verify the Windows update receipt against the checkout, not cwd

2026-09-10 01:25:45 -07:00

diagnostics_upload.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

dingtalk_auth.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

doctor_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor_connectivity.py

simplify(compat): anthropic_adapter — drop 30 re-exports + 1 alias, repoint 22 caller files (32 sites), 38 test files (~125 sites)

2026-09-03 13:16:47 -07:00

doctor_live.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

doctor_platform.py

simplify(compat): tools/mcp_tool — repoint 20 non-test callers to the defining mcp_tool_* siblings

2026-09-03 13:29:35 -07:00

doctor_report.py

refactor(hermes_cli): doctor — warn_on_error ctx manager replaces try/except-warn wrappers; platform ladders/tcc text to data

2026-09-03 00:05:41 -07:00

doctor_state.py

refactor(state): stdlib-only home for read_only_db_uri; reuse the doctor/repair helpers

2026-09-15 12:51:27 +05:30

doctor_tools.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

dump.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

env_loader.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

fix(fallback): named custom providers keep their configured identity after automatic fallback (#98739)

2026-09-13 20:51:06 -07:00

focus_view.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

foreign_sessions_browser.py

fix(sessions): honor CLAUDE_CONFIG_DIR and CODEX_HOME in foreign session discovery

2026-09-12 21:39:10 -07:00

foreign_sessions.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

free_tier_bootstrap.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

refactor(hermes_cli): gateway_enroll.py — inline single-use identity-token wrapper, compact docs

2026-09-02 20:40:51 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex rolls back or resumes when the default cannot come up; every installed unit counts

2026-09-14 16:16:06 -07:00

gateway_migrate.py

fix(gateway): migrate --multiplex rolls back or resumes when the default cannot come up; every installed unit counts

2026-09-14 16:16:06 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(update-windows): per-profile cold-start probes its own home and runs after the active spawn

2026-09-15 04:13:44 -07:00

gateway.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

git_credentials.py

fix(plugins): run gh auth token under the noninteractive git env

2026-09-10 01:00:19 -07:00

gitlock.py

refactor(cli): hold shallow.lock across write-verify-restore; share the atomic write

2026-09-12 15:00:37 +05:30

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(goals): failed quality gates re-run every boundary instead of replaying a status fingerprint

2026-09-15 03:59:50 -07:00

gui_uninstall.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

heartbeat.py

fix(tui): heartbeat ticks share the /loop idle poll and rewind when no turn starts

2026-09-06 07:20:24 -07:00

hooks.py

refactor(hermes_cli): compact hooks CLI payload table and handlers, no behavior change

2026-09-02 20:06:17 -07:00

image_provenance.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

init_command.py

refactor(hermes_cli): second pass on the 15 small modules — compact bodies, drop redundant locals/blanks, tighten module docs

2026-09-02 21:20:42 -07:00

input_sanitize.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

install_identity.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

inventory.py

feat(desktop): Nous free tier on Hermes Desktop (#105260)

2026-09-11 03:45:32 +05:30

journey.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

kanban_boards.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_db_connect.py

fix(kanban): worker liveness and kills require the spawn-time start fingerprint

2026-09-15 03:47:15 -07:00

kanban_db_dispatch.py

fix(kanban): worker liveness and kills require the spawn-time start fingerprint

2026-09-15 03:47:15 -07:00

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_db_workspace.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_db.py

fix(kanban): actor sentinel for synthesized runs; two invariant tests

2026-09-15 03:51:28 -07:00

kanban_decompose.py

fix(config): kanban decompose and local-models status keep their fail-open config reads

2026-09-13 05:09:06 -07:00

kanban_diagnostics.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

kanban_ops.py

fix(kanban): clarify that watch names its initial board

2026-09-07 06:04:06 -07:00

kanban_output.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_parser.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban.py

fix(kanban): scope the delegated-child write fence to the lineage's board root

2026-09-15 03:45:41 -07:00

lifecycle.py

refactor(cli-misc): lifecycle.py — single plugin-hook dispatch helper

2026-09-02 20:12:36 -07:00

linux_desktop_entry.py

refactor(linux-desktop-entry): collapse the fall-through into one guard

2026-09-15 04:11:55 -07:00

logs.py

refactor(cli-misc): logs.py — pass filter kwargs through instead of re-listing them

2026-09-02 20:15:37 -07:00

loops.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

macos_tcc_anchor.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(update): retain the detached updater log mirror

2026-09-07 05:56:50 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

refactor(desktop): gate the WSLg D3D12 selection inside the helper and test the real launch env

2026-09-09 10:28:52 -07:00

main_install_repair.py

fix(update): probe configured-feature deps in the target venv, not the updater

2026-09-12 08:47:21 -07:00

main_platform_setup.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

main_provider_setup.py

feat(hermes model): delegation's effort step says 'Inherit parent'

2026-09-13 16:43:50 -07:00

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

main.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

managed_scope.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

managed_uv.py

docs(update): scope the stderr-merge comments to legacy hand-offs

2026-09-05 15:02:53 +02:00

mcp_catalog.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:34:43 -07:00

mcp_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

mcp_picker.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

mcp_security.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

mcp_startup.py

fix(mcp): key the desktop/TUI discovery slot by profile home (#67605)

2026-09-11 19:50:46 -07:00

mem_trim.py

refactor(hermes_cli): layout compaction of managed_uv/mem_trim/migrate/managed_scope (AST-neutral) + small collapses

2026-09-02 21:44:59 -07:00

memory_oauth.py

refactor(hermes_cli): group F — drop section banners, one-line UI helpers, fold configure pre-selection, hug closers

2026-09-02 20:50:08 -07:00

memory_setup.py

fix: hindsight update-time dep resolution survives a BOM in config.json

2026-09-15 03:38:29 -07:00

middleware.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

migrate.py

refactor(hermes_cli): layout compaction of managed_uv/mem_trim/migrate/managed_scope (AST-neutral) + small collapses

2026-09-02 21:44:59 -07:00

moa_cmd.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

moa_config.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

model_catalog.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

model_cost_guard.py

refactor(hermes_cli): models cluster — AST-neutral layout compaction (hug brackets, pack hanging lists)

2026-09-02 20:51:30 -07:00

model_data_policy_guard.py

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

model_normalize.py

fix(deepseek): pass custom model ids through instead of rewriting them

2026-09-10 04:22:38 -07:00

model_search.py

refactor(hermes_cli): models cluster — AST-neutral layout compaction (hug brackets, pack hanging lists)

2026-09-02 20:51:30 -07:00

model_selection_guards.py

test: trim the context-cache guard tests to invariants; docs: name the surfaces that actually confirm

2026-09-13 20:54:50 -07:00

model_setup_flows_azure.py

refactor(hermes_cli): compact setup-flow docstrings/comments; fold env-ref identity indexing

2026-09-02 21:54:56 -07:00

model_setup_flows_bedrock.py

refactor(hermes_cli): compact setup-flow docstrings/comments; fold env-ref identity indexing

2026-09-02 21:54:56 -07:00

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix(model_switch): clear key_env only when the route changes; drop it on custom activation

2026-09-15 03:39:45 -07:00

model_setup_flows.py

feat(model-pickers): reasoning effort selection on every model picker

2026-09-13 16:43:50 -07:00

model_switch_providers.py

fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope

2026-09-15 03:46:29 -07:00

model_switch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

models_catalog_static.py

fix(models): delist hy3-free and laguna-s-2.1-free — OpenCode relay dropped them (anon 401)

2026-09-13 21:06:39 -07:00

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

models_pricing.py

simplify(compat): models — drop 52 re-exports from hermes_cli.models, repoint 16 callers + 41 test files

2026-09-03 13:48:49 -07:00

models_profile_cache.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_reasoning_caps.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_validate.py

fix(model): a selected model id is never rewritten to a catalog neighbour

2026-09-12 14:05:36 -07:00

models.py

fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope

2026-09-15 03:46:29 -07:00

nous_account.py

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

nous_auth_keepalive.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

nous_billing.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

nous_subscription.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

npm_engine.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

onepassword_secrets_cli.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

oneshot.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

pairing.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

partial_compress.py

refactor(hermes_cli): join wrapped signatures/conditions that fit one line

2026-09-02 20:40:15 -07:00

personality.py

fix(personality): honour the top-level personalities: config block on every surface

2026-09-12 08:24:26 -07:00

pets.py

refactor(hermes_cli): join wrapped signatures/conditions that fit one line

2026-09-02 20:40:15 -07:00

platform_actions.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

platforms.py

refactor(hermes_cli): personality/platforms — compact docstrings, hoist os import

2026-09-02 20:19:57 -07:00

plugin_capabilities.py

refactor(hermes_cli): plugin_packs reuses plugins_cmd console/tty/yes/fail helpers; one-line section banners

2026-09-02 21:57:39 -07:00

plugin_catalog.py

feat(plugin-catalog): default shelf is Desktop, catch-all is General; categorise today's six entries

2026-09-14 21:00:29 -07:00

plugin_compat.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

plugin_dev.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

plugin_packs.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugin_validate.py

fix(plugins): validate requires_hermes from manifest module

2026-09-12 07:57:13 -07:00

plugins_cmd_catalog.py

feat(plugin-catalog): shelve the catalog by category (Memory, Desktop, Platforms, …)

2026-09-14 21:00:29 -07:00

plugins_cmd.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

plugins_discovery.py

refactor(hermes_cli): compact plugin manifest/loader/discovery/ledger/state helpers (-100 LOC)

2026-09-03 00:09:39 -07:00

plugins_dispatch.py

fix(plugins): only mark a timed-out hook worker abandoned while it still holds its token

2026-09-15 10:48:49 +05:30

plugins_ledger.py

fix(plugins): keep one worker per callback while a timed-out worker is still running

2026-09-15 10:48:49 +05:30

plugins_loader.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_manifest.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_state.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

plugins.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

portal_cli.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

process_identity.py

fix(identity): spawn-ledger write survives surrogate-escaped argv

2026-09-12 08:27:53 -07:00

profile_channels.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_cmd.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

feat(plugins): install plugins from private git repos using the user's stored credentials

2026-09-10 01:00:19 -07:00

profiles.py

fix: release the profile MCP stderr handle before rename too

2026-09-15 04:12:41 -07:00

projects_cmd.py

refactor(hermes_cli): session-export/projects pass 2 — fold export renderers, projects_db row/meta helpers, projects_cmd str-return handlers

2026-09-03 00:06:57 -07:00

projects_db.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

prompt_size.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

prompt_stash.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

provider_catalog.py

refactor(hermes_cli): provider cluster — fold multi-line boolean chains

2026-09-02 22:55:15 -07:00

providers.py

fix(providers): pin all Actual routes to chat completions (E-1047)

2026-09-10 14:56:55 -04:00

proxy_cli.py

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

psutil_android.py

refactor(update): psutil Android installer extracts through the shared safe-tar guard

2026-09-13 05:07:11 -07:00

pt_input_extras.py

fix(cli): keypad Alt+Enter inserts a newline instead of escape text

2026-09-07 02:09:34 -07:00

pty_bridge.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

pty_session.py

fix(ux): plain-language, actionable user-facing messages (dashboard)

2026-09-15 03:36:22 -07:00

quiet_single_query.py

fix(cli): quiet -Q drain must use the async_delegation delivery ledger

2026-09-14 21:18:47 +05:30

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

refactor(hermes_cli): fold short multi-line calls/signatures in g5 files (AST-identical)

2026-09-02 20:47:24 -07:00

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

resource_limits.py

refactor(hermes_cli): drop intra-function paragraph blanks in g5 files (whitespace-only)

2026-09-02 21:00:55 -07:00

route_identity.py

refactor(hermes_cli): provider cluster — hanging-indent repack of exploded call sites (AST-identical)

2026-09-02 22:39:49 -07:00

runtime_provider_backends.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider_custom.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

secret_prompt.py

refactor(hermes_cli): setup cluster — drop statement-separating blanks inside function bodies (AST-neutral)

2026-09-02 22:25:24 -07:00

secrets_cli.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

security_audit.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

send_cmd.py

fix(dashboard): profile-routed routers run under the profile's secret scope; console send never writes the process env

2026-09-15 03:46:29 -07:00

service_manager.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_export_html.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export_md.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_filters.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_listing.py

refactor(hermes_cli): session-export/projects pass 2 — fold export renderers, projects_db row/meta helpers, projects_cmd str-return handlers

2026-09-03 00:06:57 -07:00

session_lost_and_found.py

refactor(sessions): one session-id minter; QQ update-prompt key from build_session_key

2026-09-13 05:21:02 -07:00

session_recap.py

refactor(hermes_cli): session_recap _coerce_text flattening

2026-09-02 23:59:27 -07:00

session_recovery.py

fix(sessions): salvage a page-1-header-damaged state.db in the lost_and_found lane

2026-09-11 06:37:27 -07:00

session_schema_history.py

fix(state): record display_identity/display_order in the messages schema history

2026-09-09 13:30:28 -07:00

sessions_cmd_browse.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

sessions_cmd.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_hidden_env.py

refactor(hermes_cli): setup cluster — pack hidden-env suffix and home-channel tables

2026-09-02 22:39:06 -07:00

setup_migration.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_platforms.py

refactor(platforms): every plugin setup wizard uses the shared declines_reconfigure gate

2026-09-13 05:32:38 -07:00

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

setup_terminal.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_tts.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_whatsapp_cloud.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

shared_session_attach.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

sizefmt.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

skills_config.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

skills_hub.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

skin_cmd.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

skin_engine.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

slack_cli.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

slash_exec.py

refactor(hermes_cli): slash_exec executor compaction; tips closer hug

2026-09-02 23:04:20 -07:00

sqlite_runtime.py

refactor(hermes_cli): fold verify-token branches, share track/untrack counter, compact probe script

2026-09-02 20:59:41 -07:00

sqlite_safe_read.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

sqlite_util.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

status_auth.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

status_bar_git.py

feat(cli): opt-in git_branch status-bar field (⎇ current branch)

2026-09-12 21:47:53 -07:00

status_report.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

status.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

stderr_timestamp.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

stdio.py

refactor(hermes_cli): drop blank lines after in-body imports

2026-09-02 21:36:24 -07:00

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

refactor(hermes_cli): group A — body blank-line squeeze, slash tap/diff-line helpers

2026-09-02 21:34:25 -07:00

telegram_managed_bot.py

fix(compat): pointers resolve to the object that MOVED, not a same-named stranger; stdin checker binds stdin= to the splatted definition

2026-09-03 22:00:01 -07:00

terminal_breadcrumbs.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

timeouts.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

tips.py

fix: correct two stale comments/docs strings left out of the docs batch

2026-09-08 19:52:26 +05:30

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

simplify(compat): tools/computer_use/cua_backend — drop 24 re-exports + shutil re-import, repoint 5 callers + 14 test files

2026-09-03 13:22:51 -07:00

tools_config_mcp.py

fix(mcp): CLI readers no longer reopen include: [] as "all tools enabled"

2026-09-12 08:34:43 -07:00

tools_config_post_setup.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

tools_config_providers.py

simplify(compat): image_generation_tool — drop 2 re-export noqa blocks (13 names), repoint 2 callers + 2 tests to image_generation_catalog

2026-09-03 13:10:38 -07:00

tools_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

toolset_scope.py

refactor(hermes_cli): tools_config group — AST-neutral bracket hugging

2026-09-02 20:38:18 -07:00

toolset_validation.py

refactor(hermes_cli): tools_config group — dense docstring reflow (word-identical, AST-verified)

2026-09-02 21:31:17 -07:00

uninstall.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

update_abort_recovery.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_common.py

refactor(update): collapse 90 try/except-pass and try/except-logger.debug blocks into suppress()/_best_effort() (new leaf update_cmd_common.py)

2026-09-02 16:34:55 -07:00

update_cmd_config.py

fix(update): keep the config-migration purge and reload inside the fail-open guard

2026-09-15 04:10:27 -07:00

update_cmd_deps.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

update_cmd_drain_report.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_fleet.py

fix(dashboard): accept command-scoped NOPASSWD sudo for system gateway actions

2026-09-15 04:08:00 -07:00

update_cmd_git.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_maint.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_cmd_stash.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_windows.py

fix: count service-supervised gateways as running for per-profile cold-start

2026-09-15 04:13:44 -07:00

update_cmd_zip.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_contract.py

refactor(hermes_cli/update): share profile-home + socket-identity probes between receipt and inventory; fold refusal builder; collapse try/except-pass

2026-09-02 21:49:26 -07:00

update_inventory.py

fix(gateway): served_profiles bind to a verified gateway identity, not bare PID existence

2026-09-13 15:41:01 -07:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_restart_recovery.py

refactor(hermes_cli/update): compact update_restart_recovery signatures, skips normaliser, and comments (module docstring is --help text: untouched)

2026-09-02 22:12:58 -07:00

urllib_security.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

vault.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

vercel_auth.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

verify_cmd.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

voice.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

web_deps.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

web_git.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

web_models.py

feat(desktop): add per-auxiliary reasoning effort control

2026-09-13 19:19:32 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

web_server_config.py

fix(web): lock the remaining off-loop config RMWs; keep model probes outside the lock

2026-09-15 03:40:26 -07:00

web_server_cron.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

web_server_dashboard.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

fix(dashboard): accept command-scoped NOPASSWD sudo for system gateway actions

2026-09-15 04:08:00 -07:00

web_server_idle_exit.py

fix(serve): SSH-isolated idle-exit keeps the backend alive while a cron job runs

2026-09-11 15:28:37 -07:00

web_server_lifecycle.py

refactor(dashboard): startup reconcile reuses the routers' own-store opener

2026-09-14 08:10:36 -07:00

web_server_mcp.py

simplify(compat): web_server — drop 221 re-exports (config/status/shutil/run_in_threadpool, lifecycle, 13 web_server_<concern> blocks, 47 route-handler legacy re-exports); web_deps.late()/LateState() take an owning-module arg; concern modules import each other directly (62 lazy sites)

2026-09-03 14:21:32 -07:00

web_server_memory.py

simplify(compat): web_server — drop 221 re-exports (config/status/shutil/run_in_threadpool, lifecycle, 13 web_server_<concern> blocks, 47 route-handler legacy re-exports); web_deps.late()/LateState() take an owning-module arg; concern modules import each other directly (62 lazy sites)

2026-09-03 14:21:32 -07:00

web_server_messaging.py

fix(profiles): --clone leaves messaging channels behind; --clone-channels opts in

2026-09-12 18:35:21 -07:00

web_server_oauth.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

web_server_profiles.py

fix(dashboard): profile-routed routers run under the profile's secret scope; console send never writes the process env

2026-09-15 03:46:29 -07:00

web_server_sessions.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

web_server.py

feat(multiplex)!: drop gateway.multiplex_profile_allowlist — serve every profile

2026-09-11 19:50:46 -07:00

webhook.py

Inspired by ChatGPT Work: event-triggered cron jobs via webhook routes

2026-09-13 21:30:02 -07:00

win_pty_bridge.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

windows_ssh_runtime.py

refactor(web_server helpers): second pass — helper dedupe in windows_ssh_runtime, webhook via atomic_json_write, table packing

2026-09-02 23:08:44 -07:00

worktree_cmd.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_gc.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_ops.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

write_approval_commands.py

refactor(web_server helpers): compact gateway/messaging/cron/oauth helpers and CLI utils (-21% LOC, zero behavior change)

2026-09-02 21:54:36 -07:00

xai_retirement.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00